py-cloud-init: Add references to CVE-2024-6174 and CVE-2024-11584

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Thu Jun 26 22:44:48 2025 +0200
Changeset:	f0de8bb20e677e3d8f8b2c8c9bb3efebec90ece7

Modified Files:
	py-cloud-init/TODO

Log Message:
py-cloud-init: Add references to CVE-2024-6174 and CVE-2024-11584

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=f0de8bb20e677e3d8f8b2c8c9bb3efebec90ece7

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 py-cloud-init/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/py-cloud-init/TODO b/py-cloud-init/TODO
index df6c978f3f..c1cf204a96 100644
--- a/py-cloud-init/TODO
+++ b/py-cloud-init/TODO
@@ -39,3 +39,6 @@ Fix self tests so they succeed (or the relevant tests are skipped on NetBSD):
  * TestDataSourceVMware.test_no_data_access_method
    Exception: called subp. set self.allowed_subp=True to allow
    can't run dmidecode as unprivileged user
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2024-6174, CVE-2024-11584